What you are looking for are permissions on the field level - but,
there is no add permission on that level, only edit. You will need to
allow edit on the item to admins and users groups. Then on the field
level you can use ACL plugin
to allow edit on most fields only to admins group and also allow edit
of gallery to users group too. But this will give any member of the user
group an ability to edit add/remove all images in the image upload
field.
If this is not good enough you will need to create
parent-child relationship - create gallery content type with upload
field that only alows single upload and a text field where you will
store parent article id,. This content type that will have add
permisison for users group. You can include it in the article using list
field (you will need gallery search type for this, so that it will
search only items that are related to this article)